Install Guide
Overview
Caution
This guide is based on Google Workspace app 1.9.2610.0 or later. Before installing, make sure you are using the latest version. If you are using an earlier version, upgrade to the latest version.
Note
This guide is based on screens as of October 2026. Menu names and screens in the Google Workspace Admin console and the Google Cloud console may change. Screenshots are taken in Korean, and English menu names are given in the text.
The Google Workspace app collects Google Workspace audit logs (admin activity, login, Drive, Meet, Chat, OAuth token) and Alert Center alerts, and provides query commands to look up domains, users, groups, and Drive connected apps, and to read and write Google Sheets.
Setup Flow
First, decide which collectors and query commands you will use in 1. Required Permissions, and prepare only the permissions they need. Choose an authentication method in 3. Choosing an Authentication Method.
The steps depend on the authentication method. In the table below, follow in order only the steps marked Required for the method you chose. Click a task name to go to its setup page.
| Task | Where | Service account | User account OAuth |
|---|---|---|---|
| 2. Prepare a dedicated integration account and admin role | Admin console | Required | Required (not needed if you use only the Drive apps and spreadsheet commands) |
| 2. Create a project and enable APIs | Google Cloud console | Required | Required |
| 3-1. Create a service account and key | Google Cloud console | Required | - |
| 3-1. Register domain-wide delegation | Admin console | Required | - |
| 3-2. Configure the OAuth consent screen and client | Google Cloud console | - | Required |
| 3-2. Issue a refresh token | OAuth 2.0 Playground | - | Required |
| 4. Install the app, add a connect profile and collectors | Logpresso Sonar | Required | Required |
Network Requirements
Sonar must be allowed outbound HTTPS (443) access to the addresses for the features you use.
| Address | Used by |
|---|---|
oauth2.googleapis.com | All features (token issuance) |
admin.googleapis.com | Admin Activity, Login, Drive, Meet, and Chat collectors, *-logs query commands, google-workspace-domains, users, groups |
alertcenter.googleapis.com | Alert Center collector, google-workspace-alerts |
www.googleapis.com | Drive Activity collector, google-workspace-drive-logs, drive-apps, drive-app |
sheets.googleapis.com | google-workspace-sheets-values, sheets-write-values |